Please note ISO, PCI and COBIT control catalogs are the property of their respective owners and cannot be used unless licensed, we therefore do not provide any further details of controls beyond the mapping on this site.

Warning- there is not an exact correspondence between the catalogs, as the focus of the materials varies as does the level of granularity on specific topics. We have elected to include partial matches, where wording may vary but semantic intent is similar.The PCI-DSS mapping is considered DRAFT. Last updated 29-May-2013

A map against ISO27000 series will be added soon. Drop us a mail if you have feedback or have a need for other mappings.

OSA is a not for profit organization, supported by volunteers for the benefit of the security community. If you find our materials are useful, or we have saved you significant time or effort, please consider a small donation to help offset the costs of developing and hosting.